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Not an Easy Problem to Solve 
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Replying to @MalwareJake 


CISO: How many windows hosts do we 
have? 

AV Guy: 7864 

Desktop Management: 6321 


EDR Team: 6722 
CMDB Team: 4848 
SIEM Team: 9342 


x55 AM - B Feb 2018 


494 Retweets 920 Likes 4 9 e 2 «5 8 g &T 


tl 44 Q 9 


(9 Qualys. 


Clqgud 
Agent 


Passive 
Serfsor 


Network 
e 
Scanner 


TEIE 
Connectors 


Asset Inventory Catalog 


Software Models Hardware Models 
420K+ 140K+ 


e . g $ Va“: P. 
es . [% 

. Pd ` = . wa 
Y € 5 = z 
.. . ` 

oe f E 

. x: 


Symantec 


Lenovo Group | | 
*.+@ Toshiba ,:* 3291. 


. 
$478 4 
. o . 
- 
e.. . 
LI . 
. 
= 


@ Quqlys. 


Hardware Operating System Software 


Base OS Runtime AIX: | mysql-community-server 
06.01.0009.0300 EE 5.6.35-2.el7.x86_64 
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Vulnerabilities BETA 


> operatingSystem.category:Server and software: (category :Database) 
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Auto-Tagging using Catalog Attributes 


Tag Edit: Database Server 


Asset Inventory catalog 


1 Edit Mode Set the tag type and rules 
attributes are extended to the eee TT 
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Action Log Query 
Auto-Tagging rules uses QQL m ——— 


Test Rule Applicability on Selected Assets 


syntax (no groovyl) 


Use catalog auto-tags to solve 
the "OR" reporting problem 
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Eliminate Asset Blind Spots for your 
Security Program 


Passive Sensor (included in VMDR) discovers 
assets in real time and provides context of 
how these devices communicate 


Immediate visibility of unknown unmanaged 
devices between VM scan windows ©) 


VMDR adds new workflows 

° auto-tag unmanaged assets 

* activate for VM scanning 

° trigger 3 party install of Cloud Agent 
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Software Normalization + Catalog 
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Enhance VMDR 
with additional 
Asset Inventory 


add-on capabilities 
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Hardware and Software Lifecycle (EOL/EOS) 


Enterprise IT Infrastructure + 
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Make remediation 
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Asset Inventory 
CMDB Sync 


Use Qualys VMDR sensors for 
asset discovery (Scanner, agent, 
cloud, container, mobile device, 
more) 


Continuous sync for enriched 
asset data into ServiceNow CMDB 
(certified for 3 last releases) 


Assets are automatically mapped 
to Configuration Item (Cl) Classes 
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Summary and Take-Aways 


Great Security Programs start with Great Asset Inventory 


Use the included Qualys VMDR sensors for asset discovery 
across all asset types for your hybrid IT environment 


Always up-to-date normalized view with catalog attributes 
gives asset context to VM programs 


Enhance VMDR with additional Asset Inventory capabilities: 
EOL/EOS Lifecycle, CMDB Sync, Software Usage 
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Thank You 


Chris Carlson 
ccarlson@qualys.com 


